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(54) Solid state on-person data carrier 
and associated data processing system 

(57) A pocket-size object which may be 
used as a 'card' for a variety of person- 
ally based data transactions, (personal 
identification, supply of a control func- 
tion to a machine, debiting an account 
with instant (off-line) credit sufficiency 
check; a method of securely paying to a 
vending machine, etc, comprises in 
combination: 

magnetically permeable elements; at 
least one integrated circuit comprising 
memory and logic functions; ac/dc con- 
verting means for providing the internal 
operating voltages at the moment of 
use; and means for sequential synchro- 
nizing with a fixed data processing 
installation. The data carrier comprises 
memory devices which are so consti- 
tuted that they can hold data after 
power is removed and in the preferred 
form a single chip is shown to comprise 
both memory, address-, logic, and com- 
puting functions. 

The component also has spare mem- 
ory capacity reserved for holding a 
special 'check number' which, however, 
cannot be read out by any means. They 
serve the security protection of the 
main data and provide a safeguard that 
only authorized alteration of the data 
contents can take place. 
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SPECIFICATION 

Solid state on-person data carrier 

5 The principle of a solid state pocket-size.carrier of electronically stored digital data and the manner of 5 

reactively transferring data bi-directionally between said carrier and a stationary computer has already been 
, described by the applicants in a British patent. 

One drawback of the initial design was the inadequate protection against accidental or fraudulent entry of 
new data This would be particularly serious if the data carrier were used as a means of payment. Another 
10 drawback - when the data carrier contained variable data - was the dependence on a battery fitted into the 10 

data carrier. . . . ^ . 1 

This paper describes several innovative improvements. One of them is a method for battery-less 
operation. Another is a simplified and more robust mechanical construction of the data carrier. A third is the 
provision of protective data and a method for changing them at random intervals. 
15 As to the first mentioned improvement it is characterized by the incorporation of an electrically alterable 15 
Memory chip. The second, by proposing a carrier structure which provides a single magnetic circuit instead 
of several such. The third improvement is achieved by the combination of dedicated hardware and software 
concepts. 

In the drawing which illustrate these improvements, 
20 Figure 1 is a partial cross section A - A through a portable data carrier 20 
Figure 2 is a section B - B of the same 
Figure 3 is a sectional view of the data sensor unit 

Figure 4 is a section B - B through said data sensor showing drive and data coils 
Figure 5 is an auxiliary sketch showing the chief electrical constitution of the current flow in the coils 
25 Figures 6, 7 and 8 showthe logic circuitry and associated power supply in the interior of the data carrier, 25 

^RgVres Sand 10 show essential portions of the logic circuitry of the data processor and data transfer 
control unit which is associated with the data sensor unit, Figures 3 and 4. 

30 Description of on-person data carrier m 30 

The same consists of a moulded or otherwise formed object 1 of ferric ceramic having a central core 1c and 
finlike extensions 1 b. The corners 1 a of the essentially square-like object are re-inforced in thickness. Coils 3 
and 3a are fitted to the core. A further coil with much fewer number of turns than 3 is the coil 4. A printed 
circuit board 2 is attached to both sides of the central disk, and carries the various electrical and IC 

35 components such as flat packages 5 and 6 or capacitor 7, etc. The whole assembly may be closed by side 35 
plates 2a and potted in suitable resin or silicon compound. The finished ceramic component is the placed 
into two halves of a flat disk 10 the hollow spaces of which are filled with a softer grade of elastic material 9. 
Afterwards the two half spheres are moulded and fused together, for example by microwave heat 

40 

40 Description of the Sensor Unit 

The same consists in this example of two halves fitted into a supportive frame 12. This frame also serves 
as receptacle for the data carrier component 10, which, as the drawing indicates, may be dropped into the 
sensor unit where it comes to rest on piston 20. The latter may be so connected to mechanical actuators that 
on completion of the data transfer transaction it is either sideways withdrawn so that the carrier component 

45 is allowed to drop into a receptacle, orthe piston 20 is lifted upwards to return the component (10) to the 45 
user 1 3 and 14 are the two potlike parts. The outer diameter is about equal to the diagonal dimension of part 
1 of the portable data component. Drive coils are 15 and 17; and 16 has again much fewer turns and 
mediates the data signal which in this proposal has a higher frequency that the clock pulses injected into 
coils 15 & 17. 



50 



50 



Description of the circuitry of the on-person data carrier. 

Figures 6, 7 and 8 should be laid together, with Figure 6 at the bottom and Figure 8 upmost to form one 
single circuit. The same provides an example for realizing an on-person data component by using an 
electrically alterable ROM. It is clear that the adaptation of the idea depends on the specific type of memory. 
55 The present description is oriented to a G I chip known as ER 1 400 for which a data sheet is enclosed This 55 
circuit depends on the use of separate erase pulses having a negative voltage for erasing a memory ocatlon. 
More recent devices may not require this operation step but, on the other hand, may require others. What is 
described hereunder should therefore be taken only as an illustration of a principle. 
In the proposed Earom chip one modification has been made; • ■ '„ , n « n 

60 The General Instruments device uses all the combinations of three 'mode inputs' C, C 2 C 3 except C, plus C 2 60 
plus C 3 . In our setup, this combination is also used, namely for the command 'Enter data stream into the 
Subtrahent Register' (such subtrahent reqister is not provided in the General Instrument LSI.) 

TR1 is identical with coil 3a in Figure 2, TR2 corresponds to coil 3, Figure 2, and TR3 corresponds to coil 4, 
Figure 2. TR1 carries clock pulses as indicated in Figure 5 and produces a d.c. output at V DD . TR2 carries the 
65 same clock pulses and produces a negative d.c. voltage V GG . TR3 carries only data pulses phase shifted 65 
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against the clock pulses as indicated In Figure 5. They consist of pulses of a much higher frequency which are 
detected by tuned circuits or by a phase locked lopp circuit in the main control unit (figure 9). Clock pulses 
are shaped in unit E and passed on to Nandgate N9 and also to a combined rectifier and delay unit H. The 
same builds up a positive voltage level and provides a triggered«output to G only aftera minimum voltage 

5 level is reached. G. is a bistable clock by output from E. When it goes high (which can only coincide with a 
rising clock-edge) Nandgate N9 goes low. At this time the zero condition still exists. However, And gate N3 
produces an output because (o) count of counter K and inverter M1 have both high levels. This furnishes the 
OSC, unit (Figure 7) with a high enabling input via Or gate R16and causes the phase-locked loop IC, P to 
respond to the frequency of the signal transferred from circuit Figure 6 to circuit figure 9. Inconsequence a 

10 pulse, - the so called synchronizing pulse - will be applied to gate N 12 (figure 9) and thus to F/F 2 bistable. 
From that moment onwards both systems, the portable data component and the data processing unit, are in 
readiness to accept count-down clock pulses originating at CK - OSC (figure 9). There are two counters in 
both systems, namely the L and K counter in the portable data component, and the Lq and K Q counter in the 
processor. . 

15 The K counters count up the word bits to be handled during each program step (in this example there are 
only two bit lengths, 1 5 and 2). The L counters count the program steps, and its decoded outputs are used for 
enabling such gates and functional units or sub-circuits as during a 'given program step must play a part. 
The following are the program steps in this example: 



20 K counter (0) L counter 0. 

(1W20) 0. 



synchronizing pulse, one clock pulse wide 

transfervalue location address from 
processor unit to portable carrier 



,10 



15 



20 



25 



(1 - 14) 



transfervalue number from P.C. (portable 
carrier) to PR (processor). 



25 



30 



(0) 

(1 r 20) 



2..,, 



compare in PR value number with 
debit number in COMP circuit. Fig. 

address for the check word is transferred 
from PR to PC 



30 



35 



40 



45 



transfer the check number selected in 
the PR on the basis of library numbers 
to the PC and enter into the Subtrahent 
register 

Read out the check number from the 
addressed location in the Memory 
and serially pass on to the 'Arithmetic Logic 
Unit' in chip circuit D which con- 
currently also circulates the contents 
of the subtrahent register through 
the 'Arithmetic Logic'. (Serial compa- 
rison). If the output is different 
from zero all further operation is 
stopped. 



35 



40 



45 
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CLAIMS 



50 



1 . A data transfer system comprising a portable solid-state on-person data carrier and a computer unit, 
the portable carrier incorporating an electrically alterable memory device and means for causing mode 

55 control inputs to be activated in the portable component in accordance with a pre-arranged schedule. 55 

2. As in Claim 1 in which the electrically alterable memory device comprises also a subtrahent register 
and and arithmetic logic circuit In an integrated condition. 

3. As in Claim 1 in which the Computer comprises means for deriving from the data of the portable 
component one of several check numbers and means for presenting said check numbers to the portable 

60 component for internal comparison 60 

4. As in any of the foregoing claims, means in the data carrying component for comparing check data 
received with check number held and means for disabling the clock circuit if disparity. 

5. As in 1 ) a portable component as shown in Figure 1 and 2 

6. As in 1), a data sensor device, as shown in Figure 3 and 4 

65 7. As in 1 ), means for changing the address location of check numbers and value numbers held in the 65 
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portable on-person data carrier. 

New claims or amendments to claims filed on 14 May 1979 
Superseded claims 1-7 

5 New or amended claims:- 1-11 5 

, T. A data transfer system comprising a portable solid-state on-person data carrier, a sensor unit 
interfacing data, and a computer unit, the portable data carrier Incorporating an electrically alterable 
memory device and means for causing mode control inputs to be activated in the portable data carrier for 
10vconsecutively arranged operations in accordance with a set schedule. 10 
2. A data transfer system comprising a portable solid-state on-person data carrier, a sensor unit 
intercacing data, and a computer unit as in claim 1 in which the electrically alterable memory device 
comprises also a subtrahent register in an integrated condition. 
3 A data transfer system as in claim 1 in which the computer unit comprises means for deriving from the 
15 data transmitted from the portable on-person data carrier an indication which one of a number of Possible 15 
check numbers is stored in the said portable data carrier, and means for activating the register holding said 
number in order to transmit it to the said portable data carrier for comparison. 

4. A data transfer system as in any of the foregoing claims in which said the data carrier contains means 
for internally comparing the check number received into its register with the check number held in one of its 

20 memory locations, and further means for disabling the continuation of the program if disparity of the two 20 
numbers is established. 

5. A data transfer system as in Claim 4 in which the circuit of the said portable data component also 
comprises means for signalling to the cpmputer unit any disparity between the said two numbers in such a 
manner that thereby no conclusions can be drawn as to the true check number held in one of the memory 

25 locations of the said portable data component. 25 

6. A data transfer system comprising a portable On-person solid state data carrier, a sensor unit 
interfacing data and clock pulses, and a computer unit, in which the said data carrier consists of a twin 
shallow disk with flanged rim made of magnetically permeable material the bottom plate of which is 
common to both, each having a centrally disposed stud of same material {the studs pointing in opposite 

30 directions) the rims of the dishes and the centre studs serving as transformer yokes for two magnetic circuits 30 
which are completed by suitably shaped magnetic circuits when the said data carrier is placed into the said 

sensor unit . , , . 

7. A data transfer system comprising a portable on-person solid state data carrier, a sensor unit for data 
interfacing and clock pulses, and a computer unit as claimed in (6) in which the hollow spaces of the two 

35 dish-like parts are filled with electronic circuitry Including large scale integ rated elements, suitably sealed 35 
against intrusion of moisture or gases. 

8. A data transfer system as in claims 1, 6 and 7 in which the computer unit provides unidirectional time 
reference signals (clock pulses) and electrical power to the said data component and exchanges 
bi-directionally data with the said portable data component whereby the said two magnetic circuits in the 

40 absence of data convey clock pulses having a definite phase relationship with each other, one of which is 40 
used as the time reference signal while both are used for powering the portable component. 

9. A system as claimed in (8), in which data are transferred by associating a data bit with a phase change 
between the two pulse channels. . 

10. A data transfer system as in claims 1 and 6 comprising means for representing a data bit by a burst of 

45 hig h frequency oscillation superimposed on the clock pulse flow in at least one of the said two pulse 45 

channels. . 
- 11. A data transfer system as in claims 6 and 7, in which the portable data carrying component is 

enshrouded by a disk of resilient but formstable material to procure maximum protection against physical 

and temperature shocks. 
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